Threshold Verification Technique for Network Intrusion Detection System

Internet has played a vital role in this modern world, the possibilities and opportunities offered are limitless. Despite all the hype, Internet services are liable to intrusion attack that could tamper the confidentiality and integrity of important information. An attack started with gathering the information of the attack target, this gathering of information activity can be done as either fast or slow attack. The defensive measure network administrator can take to overcome this liability is by introducing Intrusion Detection Systems (IDSs) in their network. IDS have the capabilities to analyze the network traffic and recognize incoming and on-going intrusion. Unfortunately the combination of both modules in real time network traffic slowed down the detection process. In real time network, early detection of fast attack can prevent any further attack and reduce the unauthorized access on the targeted machine. The suitable set of feature selection and the correct threshold value, add an extra advantage for IDS to detect anomalies in the network. Therefore this paper discusses a new technique for selecting static threshold value from a minimum standard features in detecting fast attack from the victim perspective. In order to increase the confidence of the threshold value the result is verified using Statistical Process Control (SPC). The implementation of this approach shows that the threshold selected is suitable for identifying the fast attack in real time.Comment: 8 Pages, International Journal of Computer Science and Information Securit

ESTABLISHMENT OF IPV6 NETWORK USING TUNNELLING MECHANISM ON INTRANET

The emerging Internet Protocol version six (IPv6) has promises several benefits that can overcome the weaknesses of the current Internet Protocol IPv4. Among the solution provided by IPv6 are solving the depleted IPv4 addresses and providing strong security mechanism in the network. Despite the hype and promises, there is still some issues need to be resolved before an organization can migrate over to IPv6 and still allowing the IPv4 infrastructure to exist. One of the issues to be considered are the transition mechanism to be use in switching over to IPv6 as there are several transitions mechanisms to be choose by an organization to allow the coexistence of IPv6 and IPv4 in the same network infrastructure.  Therefore this paper describes the setting up of IPv6 test bed (Test6-T) in an intranet environment using the tunneling mechanism in order to find the best solution for providing an IPv6 environment in an existing IPv4 network infrastructure